Stav dette: Sniping at web applications to discover input-handling vulnerabilities